Red Hat Security AdvisoryRHSA-2007:0067
postgresql security update
Released 2007-02-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Application Stack v1 for Enterprise Linux AS (v.4) postgresql-8.1.7-3.el4s1.1, postgresql-8.1.7-3.el4s1.1.i386, postgresql-contrib-8.1.7-3.el4s1.1 +17
- Red Hat Application Stack v1 for Enterprise Linux ES (v.4) postgresql-8.1.7-3.el4s1.1, postgresql-8.1.7-3.el4s1.1.i386, postgresql-contrib-8.1.7-3.el4s1.1 +17
Fixes 5 records
Priority MEDIUM 45
PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certain checks for the data types of SQL function arguments, which allows remote auth…
CVSS 2.0HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.04969 · Published 2007-02-06 · Fixed
Priority LOW 35
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a den…
CVSS 2.0MEDIUM 6.6· Network · Low privileges · Interaction — · EPSS 0.0311 · Published 2007-02-06 · Fixed
Priority LOW 25
backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown elem…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0316 · Published 2006-10-26 · Fixed
Priority LOW 23
backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) RO…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0203 · Published 2006-10-26 · Fixed
Priority LOW 23
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handl…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0203 · Published 2006-10-26 · Fixed